Artificial intelligence news.
Straight from the original announcements.

Wiz says vulnerability remediation could be 10 times faster

November 3, 2026, 14:00Source: Wiz
Wiz says vulnerability remediation could be 10 times faster
Image: Wiz

Wiz says its Green Agent tool automates three key steps in vulnerability remediation: identifying the owner of the affected asset, finding the root cause and preparing a fix for developers. The company demonstrated how the solution works through results from three customers.

Key points
  • Green Agent automatically suggests who should be responsible for a vulnerability.
  • Using the Wiz Security Graph, it identifies the root cause and the precise line of code.
  • The tool offers environment-specific code and Terraform fixes.
  • According to Wiz, Fireblocks reduced its daily triage time by more than 70 percent.
  • According to the company, project44 achieved a tenfold acceleration in remediation.

Fixing security flaws requires multiple teams

According to a report published by Wiz on November 3, 2026, security tools can flag critical production-environment risks within minutes when an active zero-day vulnerability emerges, such as the recent PHP2Shell case. Implementing a fix, however, generally requires human coordination.

The security team identifies the risk, but it typically does not own the code, infrastructure or deployment processes. Engineering teams need to preserve dependencies and maintain development velocity, while cloud and platform operations protect uptime and infrastructure stability. Wiz says these separate workflows can cause tickets to move between teams, increasing the average time to remediation, or MTTR.

Green Agent targets three bottlenecks

The first challenge is determining who is responsible for the affected asset. In multicloud, hybrid or AI-powered environments, identifying the owner can be complicated by shared development processes, incomplete tagging or an outdated CMDB. Green Agent analyzes repository commit histories, Wiz project assignments, service catalogs, CMDB integrations and cloud logs, then suggests an owner. The security team can assign that person to the ticket with one click.

The second step is understanding the root cause. Using the Wiz Security Graph, the tool examines exposure in the runtime environment, access permissions and the connections between code and the cloud. The company says Green Agent determines whether the risk can actually be exploited, recommends a fix or a severity adjustment, and then locates the exact file and line of code responsible for the vulnerability.

The third obstacle is creating the actual fix. Green Agent offers environment-specific code or Terraform changes down to the individual line, along with pull requests that can be created with one click or tasks that can be handed to coding agents. The tool also makes the context behind its remediation suggestions available through an API and the Wiz Model Context Protocol server.

Customer examples: faster triage and remediation

Wiz highlighted results from three customers. Rogo, which develops an enterprise AI platform for financial institutions, uses the solution in its AWS and GCP environments. According to Eric Tu, the company's product security engineer, Green Agent automatically identifies the right person in the Wiz ticket, allowing developers to complete remediation more quickly.

Fireblocks, a provider of services related to digital assets and blockchain infrastructure, has reduced the time spent on daily operational triage by more than 70 percent, according to Wiz, and now reaches a resolution for critical risks on the same day. Roy Weiss, Fireblocks' head of DevSecOps, said Green Agent provides full context and a clear path to remediation.

According to Wiz, the project44 supply chain visibility platform has accelerated its remediation process tenfold. Matthew Blackert, the company's Security Operations Manager, said Green Agent offers a similar acceleration in security engineering to the one AI has brought to developers' coding speed.

Wiz describes Green Agent as a closed-loop workflow that turns security alerts into developer actions. The documentation is available after sign-in, and the company also offers a demonstration of the solution's impact on an environment.

WizWiz Green AgentRogoPHP2ShellAI agentscybersecurityenterprise AI

Related news

Omnissa expands sovereign AI infrastructure to eight markets
Products and toolsNovember 4, 2026, 09:10

Omnissa expands sovereign AI infrastructure to eight markets

Omnissa is expanding its Sovereign Solution to markets across Europe and Asia, giving organizations a managed deployment designed to keep data, operations, support and…

Coretek Named to CRN’s First 2026 AI Innovators List
BusinessNovember 3, 2026, 20:38

Coretek Named to CRN’s First 2026 AI Innovators List

Coretek has been named to CRN’s first 2026 AI Innovators list. The list, created by The Channel Company brand, recognizes North American solution providers that help…

CodeRabbit Secure checks vulnerabilities with runtime verification
Products and toolsNovember 3, 2026, 13:00

CodeRabbit Secure checks vulnerabilities with runtime verification

CodeRabbit Secure's new Runtime Verification workflow checks whether a vulnerability identified by Deep Scan can actually be reproduced in the relevant code and test…